China APT - Security Ticks

Chinese APT Exploits Unpatched Windows Flaw in Recent Attacks

China APT, Europe, exploited, LNK, Malware, Malware & Threats, Windows / SecurityTicks

Chinese APT Exploits Unpatched Windows Flaw in Recent Attacks 2025-10-31 at 12:37 By Ionut Arghire The Windows shortcut vulnerability has been seen in attacks conducted by Mustang Panda to drop the PlugX malware. The post Chinese APT Exploits Unpatched Windows Flaw in Recent Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

React to this headline:

Chinese APT Exploits Unpatched Windows Flaw in Recent Attacks Read More »

Government, Industrial Servers Targeted in China-Linked ‘PassiveNeuron’ Campaign

China APT, Industrial, Malware & Threats, PassiveNeuron, Windows Server / SecurityTicks

Government, Industrial Servers Targeted in China-Linked ‘PassiveNeuron’ Campaign 2025-10-21 at 17:34 By Ionut Arghire A threat actor has been infecting servers of high-profile entities with backdoors to exfiltrate information and deploy additional payloads. The post Government, Industrial Servers Targeted in China-Linked ‘PassiveNeuron’ Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

Government, Industrial Servers Targeted in China-Linked ‘PassiveNeuron’ Campaign Read More »

F5 Hack: Attack Linked to China, BIG-IP Flaws Patched, Governments Issue Alerts

Big-IP, China, China APT, Data Breaches, F5, Featured, Nation-State, source code / SecurityTicks

F5 Hack: Attack Linked to China, BIG-IP Flaws Patched, Governments Issue Alerts 2025-10-16 at 12:58 By Eduard Kovacs More information has come to light on the cyberattack disclosed this week by F5, including on attribution and potential risks. The post F5 Hack: Attack Linked to China, BIG-IP Flaws Patched, Governments Issue Alerts appeared first on

React to this headline:

F5 Hack: Attack Linked to China, BIG-IP Flaws Patched, Governments Issue Alerts Read More »

Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day

China APT, hacked, law firm, Nation-State, Williams&Connolly / SecurityTicks

Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day 2025-10-09 at 12:40 By Eduard Kovacs The company said there is no evidence that confidential client data was stolen from its systems. The post Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day Read More »

Security Firm Exposes Role of Beijing Research Institute in China’s Cyber Operations

China, China APT, Nation-State / SecurityTicks

Security Firm Exposes Role of Beijing Research Institute in China’s Cyber Operations 2025-10-07 at 13:34 By Ionut Arghire BIETA and its subsidiary CIII research develop and sell technologies supporting China’s intelligence, counterintelligence, and military operations. The post Security Firm Exposes Role of Beijing Research Institute in China’s Cyber Operations appeared first on SecurityWeek. This article

React to this headline:

Security Firm Exposes Role of Beijing Research Institute in China’s Cyber Operations Read More »

Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware

APT, China, China APT, espionage, Malware, Nation-State, Net-Star, Phantom Taurus / SecurityTicks

Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware 2025-10-01 at 16:33 By Ionut Arghire Focused on espionage, the threat actor shares infrastructure with Chinese APTs, but uses different TTPs in attacks. The post Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

Chinese APT ‘Phantom Taurus’ Targeting Organizations With Net-Star Malware Read More »

Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability

China APT, exploited, VMWare, Vulnerabilities, Zero-Day / SecurityTicks

Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability 2025-10-01 at 13:36 By Ionut Arghire Impacting VMware Aria Operations and VMware Tools, the flaw can be exploited to elevate privileges on the VM. The post Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability Read More »

Chinese Cyberspies Hacked US Defense Contractors

China, China APT, defense, espionage, Nation-State, RedNovember / SecurityTicks

Chinese Cyberspies Hacked US Defense Contractors 2025-09-25 at 16:11 By Ionut Arghire RedNovember has been targeting government, defense and aerospace, and legal services organizations worldwide. The post Chinese Cyberspies Hacked US Defense Contractors appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Chinese Cyberspies Hacked US Defense Contractors Read More »

Chinese Spies Lurked in Networks for 393 Days, Hunted for Zero-Day Intel

China, China APT, Nation-State, UNC5221, Zero-Day / SecurityTicks

Chinese Spies Lurked in Networks for 393 Days, Hunted for Zero-Day Intel 2025-09-25 at 15:33 By Eduard Kovacs Google’s Threat Intelligence Group and Mandiant have shared findings on a recent BrickStorm campaign linked to UNC5221. The post Chinese Spies Lurked in Networks for 393 Days, Hunted for Zero-Day Intel appeared first on SecurityWeek. This article

React to this headline:

Chinese Spies Lurked in Networks for 393 Days, Hunted for Zero-Day Intel Read More »

Details Emerge on Chinese Hacking Operation Impersonating US Lawmaker

APT41, Brass Typhoon, China, China APT, cyberespionage, espionage, Nation-State, Winnti / SecurityTicks

Details Emerge on Chinese Hacking Operation Impersonating US Lawmaker 2025-09-17 at 15:59 By Ionut Arghire The campaign targeted US government, think tank, and academic entities involved in US-China relations, international trade, and economic policy. The post Details Emerge on Chinese Hacking Operation Impersonating US Lawmaker appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Details Emerge on Chinese Hacking Operation Impersonating US Lawmaker Read More »

Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report

APT41, China, China APT, cyberespionage, espionage, impersonation, Nation-State, US / SecurityTicks

Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report 2025-09-08 at 18:35 By Eduard Kovacs China’s APT41 sent out malicious emails on behalf of Rep. John Moolenaar to collect information ahead of US-China trade talks. The post Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report appeared first on

React to this headline:

Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report Read More »

Chinese Silk Typhoon Hackers Exploited Commvault Zero-Day

China APT, cloud security, Commvault, Silk Typhoon, Zero-Day / SecurityTicks

Chinese Silk Typhoon Hackers Exploited Commvault Zero-Day 2025-08-22 at 16:45 By Ionut Arghire Silk Typhoon was seen exploiting Citrix NetScaler and Commvault vulnerabilities for initial access to victim systems. The post Chinese Silk Typhoon Hackers Exploited Commvault Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this

React to this headline:

Chinese Silk Typhoon Hackers Exploited Commvault Zero-Day Read More »

Web Hosting Firms in Taiwan Attacked by Chinese APT for Access to High-Value Targets

China APT, Nation-State, Taiwan, web hosting / SecurityTicks

Web Hosting Firms in Taiwan Attacked by Chinese APT for Access to High-Value Targets 2025-08-18 at 13:17 By Ionut Arghire Chinese APT UAT-7237 has been targeting Taiwanese web infrastructure for long-term access to high-value entities. The post Web Hosting Firms in Taiwan Attacked by Chinese APT for Access to High-Value Targets appeared first on SecurityWeek.

React to this headline:

Web Hosting Firms in Taiwan Attacked by Chinese APT for Access to High-Value Targets Read More »

Report Links Chinese Companies to Tools Used by State-Sponsored Hackers

China, China APT, Nation-State / SecurityTicks

Report Links Chinese Companies to Tools Used by State-Sponsored Hackers 2025-07-31 at 14:59 By Ionut Arghire SentinelLabs connects the dots between prolific Chinese state-sponsored hackers and companies developing intrusion tools. The post Report Links Chinese Companies to Tools Used by State-Sponsored Hackers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

Report Links Chinese Companies to Tools Used by State-Sponsored Hackers Read More »

Chinese Spies Target Networking and Virtualization Flaws to Breach Isolated Environments

China APT, F5, Fire Ant, Network Security, VMWare / SecurityTicks

Chinese Spies Target Networking and Virtualization Flaws to Breach Isolated Environments 2025-07-25 at 16:19 By Ionut Arghire Chinese cyberespionage group Fire Ant is targeting virtualization and networking infrastructure to access isolated environments. The post Chinese Spies Target Networking and Virtualization Flaws to Breach Isolated Environments appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Chinese Spies Target Networking and Virtualization Flaws to Breach Isolated Environments Read More »

ToolShell Attacks Hit 400+ SharePoint Servers, US Government Victims Named

China APT, exploited, Government, Malware & Threats, Microsoft, SharePoint, ToolShell, vulnerability / SecurityTicks

ToolShell Attacks Hit 400+ SharePoint Servers, US Government Victims Named 2025-07-24 at 12:35 By Eduard Kovacs More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors. The post ToolShell Attacks Hit 400+ SharePoint Servers, US Government Victims Named appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

ToolShell Attacks Hit 400+ SharePoint Servers, US Government Victims Named Read More »

Microsoft Says Chinese APTs Exploited ToolShell Zero-Days Weeks Before Patch

China APT, exploited, Malware & Threats, Microsoft, SharePoint, ToolShell, Zero-Day / SecurityTicks

Microsoft Says Chinese APTs Exploited ToolShell Zero-Days Weeks Before Patch 2025-07-22 at 20:47 By Eduard Kovacs Microsoft says the Chinese threat actors Linen Typhoon, Violet Typhoon, and Storm-2603 have been exploiting the ToolShell zero-days. The post Microsoft Says Chinese APTs Exploited ToolShell Zero-Days Weeks Before Patch appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Microsoft Says Chinese APTs Exploited ToolShell Zero-Days Weeks Before Patch Read More »

ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets

China, China APT, exploited, Featured, Malware & Threats, SharePoint, ToolShell, Vulnerabilities, Zero-Day / SecurityTicks

ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets 2025-07-22 at 11:44 By Eduard Kovacs More details emerged on the ToolShell zero-day attacks targeting SharePoint servers, but confusion remains over the vulnerabilities. The post ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets appeared first on SecurityWeek.

React to this headline:

ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets Read More »

China’s Salt Typhoon Hacked US National Guard

China, China APT, Featured, Government, Nation-State, National Guard, Salt Typhoon / SecurityTicks

China’s Salt Typhoon Hacked US National Guard 2025-07-16 at 12:25 By Ionut Arghire Chinese hacking group Salt Typhoon targeted a National Guard unit’s network and tapped into communications with other units. The post China’s Salt Typhoon Hacked US National Guard appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React

React to this headline:

China’s Salt Typhoon Hacked US National Guard Read More »

Chinese Hackers Target Chinese Users With RAT, Rootkit

APT, China, China APT, Malware, Malware & Threats, Silver Fox / SecurityTicks

Chinese Hackers Target Chinese Users With RAT, Rootkit 2025-06-27 at 13:02 By Ionut Arghire China-linked Silver Fox hacking group is targeting Chinese users with fake installers carrying a RAT and a rootkit. The post Chinese Hackers Target Chinese Users With RAT, Rootkit appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

Chinese Hackers Target Chinese Users With RAT, Rootkit Read More »